PT-2007-3364 · Xo Design · Xodagallery

Name of the Vulnerable Software and Affected Versions: xodagallery affected versions not specified Description: The issue allows remote attackers to execute arbitrary code via the cmd parameter in administration.php. However, it's noted that administration.php does not use the cmd parameter for...

CVE-2007-1429

Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code via a URL in the cmd parameter to 1 admin/utfdbmigrate.php or 2 filter.php...

CVE-2007-1429

CVE-2007-1429 affects Moodle 1.7.1, exposing remote PHP code execution via remote file inclusion. The vulnerability allows an attacker to supply a URL in the cmd parameter to either admin/utfdbmigrate.php or filter.php, leading to arbitrary code execution on the server. Multiple connected sources...

CVE-2004-2318

The administrative interface surgeftpmgr.cgi for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service crash via requests with two percent % signs in the CMD parameter...